Open Source Linux Firewall Software - Page 4

This project will serve as a central hosting/bug tracking center for modifications to the SmoothWall.org firewall distribution. Support and information for the "mods" posted here can be found on the SmoothWall.org forums, the SmoothWall.org IRC server, or

Vuurmuur is a powerful firewall manager for Linux/iptables. Vuurmuur supports traffic shaping and live monitoring. It has an easy to learn configuration that allows both simple and complex configurations, and can be fully configured through the Ncurses GUI. Vuurmuur supports NAT, Port Forwarding and has IPv6 support.

Yubox is an IoT platform. A set of software and other open tools to easy a IoT project deployment.

Bored of having HTTP-only connection to the Internet? Tired of being unable to connect to irc through a HTTP proxy? desproxy (a TCP tunnel for HTTP proxies) just makes you able to tunnel all your TCP traffic through a HTTP proxy! Keywords: HTTP pr

Jkaptive is a simple captive portal without RADIUS and thus, without total security, but at the same time. without too much hassle. The reason behind this is because a lot of site administrators don't need tight security - their site is just a café which offers free internet access on an unsecured WLAN access point connected to the internet and they need a ticketing system to make it cumbersome for average people to use this offering without actually buying a single coffee. Jkaptive itself just presents the login page,checks the token and places netfilter rules. Telling apart ticketed from unticketed traffic is done through Linux' netfilter. As no proxy server is involved, jkaptive has no performance penalty, nor does it create problems with non-http traffic. Once the token is accepted, jkaptive is out of the way of any network packets completely. For presenting the login page, jkaptive has a built-in webserver, so no additional webserver application is needed.

redWall is a bootable CD-ROM Firewall with Snort, snortsam, dansguardian and support for fwbuilder, spamassassin, reporting (using ACID/sarg/ntop/webfwlog), VPN (FreeSWan/PoPToP/Openvpn) and mail alerting (by mail). Configs are stored on a Floppy or USB

AGT is a powerful console frontend to iptables, supporting nearly all of the iptables extensions. All options can be specified in a configuration file with similar syntax to 'ipf' and 'ipfw'.

AMaViS is a script that interfaces a mail transport agent (MTA) with virus scanners.

The BACnet Firewall Router (BTR) is an application that combines BACnet routing capability with traffic management functions to carefully control access to building automation and control networks.

Bait and Switch combines IDS tech (Snort primarily) and Honeypots into a new, more valuable, reactive system. After receiving an alert, B&S protects your server by silently redirecting hostile traffic to a honeypot while leaving other traffic alone.

Campagnol is a decentralized VPN over UDP tunneling. It uses UDP hole punching to open connections through NAT/firewall and OpenSSL's DTLSv1 implementation for mutual authentication and encryption.

This tools help you migrating existing Checkpoint Firewall 1 Installation and Rulesets to Linux or *BSD based Firewall. This is done by converting the Rulebase- and the Objects- Database from Checkpoint to the FirewallBuilder XML Format.

Bootable CD Forensics/Virus Scanning/Recovery/PenTesting platform

The package includes tools that make a fully functional user accounting system for a small ISP. Functionality includes: traffic shaping, management of users' accounts, firewall, network monitoring, link quality measurement, alert system, etc.

This is a simple Webinterface to ban or unban IPs with Fail2Ban. Written in PHP. Uses fail2ban-client operations on the local socket. Questions? Contact me: steffen[at]simails.de Update for Debian 13 Trixie and others running systemd: To get the socket-permission fix working, do this: 1. systemctl edit fail2ban [Service] ExecStartPost=/bin/sh -c 'while [ ! -S /var/run/fail2ban/fail2ban.sock ]; do sleep 0.2; done; chmod 0766 /var/run/fail2ban/fail2ban.sock' -> strg+o, strg+x 2. systemctl daemon-reload 3. systemctl restart fail2ban 4. ls -l /var/run/fail2ban/fail2ban.sock

Software system for FlowScreen Router, with SempGate FPGA firmware and Intel EP80579 based board, it implements a high performance (1.5M pps network traffic) router system with open architecture for 3-rd party network application development.

Enable Linux firewall to support connection tracking and NAT of H.323 protocol. It supports RAS, Fast Start, H.245 Tunnelling, Call Forwarding, Signal Proxy/Softswitch, RTP/RTCP and T.120 based audio, video, fax, chat, whiteboard, file transfer, etc.

Hardened Linux is a secured and minimalized distribution based on Slackware. It is designed to run as firewall, IDS host, authentication system and VPN gateway. PaX and SSP is included.

IPFIRE Firewall for ARM architecture (OrangePi) Now support OrangePi Zero, OrangePi One, OrangePi PC Original source and project web: https://www.ipfire.org/

SOCKS Server and Library for Java. Support for versions 4 and 5 of SOCKS protocol. Designed to be easily expandable to support different encryption/authentication/authorization methods. Sample server and client are available.

M0n0wall currently doesn't support IPSEC VPN where one or both ends are dynamic IP addresses. This PHP script along with the dynamic DNS service built into m0n0wall, auto-updates the remote gateway IP address in the VPN configuration.

Milkshake is a Slackware-based Linux distribution that boots from a USB stick and turns an unused PC into a home firewall/router. This project is currently in prealpha and is not intended for use yet. Please do not rate it up or down yet.

The Netbios Share Samba Scanner scan C classes and reveal all open shares. It will tell you all the information and even show the content of the shares. It will also show you shares that are not accessible.Also provide a username and password to it. To know more about SecPoint IT security solutions visit us at www.secpoint.com

Plugdaemon is a tool that is inspired by, but not based on, programs like plug-gw. It was originally a simpler alternative, but the connection balancing code and other features makes it a lot more versatile.

Enables access to SSH Shell and File Transfer services using a web browser. Java Servlet application uses pure HTML to provide access to SSH services.